General
- Target e638c87a_gd.txt
- Size 350B
- Sample260701-xdgvvset4t
- SHA256 2138f27d4914b268074835824a7b03acdcd2a2488fadb16a9a9df0217290847b
- MD5 9ca37ed025afc1e0a12d64162b9fd086
- SHA1 c3b9cd6259971dab01719438fc2b3a7e6de8b192
- SHA512 130800165886038b6af87e3977a68c80e30bebe7ec101b05414ef8de11d5dcee468ccf7dc38572512888dac5565b563abb54bab77582336c500b20e30ce92a24
- TLSH T1E4E0267FD6279651C2106280532849C7E8B2112700C6D43972ECC284BF38553D61686B
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
e638c87a_gd.ps1
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
e638c87a_gd.ps1
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target e638c87a_gd.txt
- Size 350B
- SHA256 2138f27d4914b268074835824a7b03acdcd2a2488fadb16a9a9df0217290847b
- MD5 9ca37ed025afc1e0a12d64162b9fd086
- SHA1 c3b9cd6259971dab01719438fc2b3a7e6de8b192
- SHA512 130800165886038b6af87e3977a68c80e30bebe7ec101b05414ef8de11d5dcee468ccf7dc38572512888dac5565b563abb54bab77582336c500b20e30ce92a24
- TLSH T1E4E0267FD6279651C2106280532849C7E8B2112700C6D43972ECC284BF38553D61686B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Loads dropped DLL